Privacy Policy
1. Who we are
Frontrunner is a go-to-market engineering company: we build and run the systems (data, playbooks and autonomous agents) through which our customers acquire and serve their own customers. We are the controller of the personal data described in this policy unless a section says otherwise.
2. Data we collect
Account data. When you sign in to the platform we receive your name, email address and, if you sign in with Google, your Google account identifier and profile picture URL. Sign-in is provided through WorkOS (our identity provider); if you choose an emailed code instead of Google, we process only your email address. We do not store passwords.
Usage data. We record what you do in the platform (pages viewed, actions taken, agents run, messages to the assistant) together with technical data such as IP address, browser and device type, so that we can secure the Service, understand how it is used and improve it. We use PostHog for product analytics.
Customer data. When your organisation connects third-party systems (for example a CRM, an email or LinkedIn outreach tool, or an analytics product) we process the data those systems return on your organisation's instructions. For that data your organisation is the controller and Frontrunner is a processor acting under the agreement with your organisation.
Communications. Emails you send us, and transactional emails we send you (sign-in codes, invitations, alerts), which we deliver through Resend.
3. Google user data
If you sign in with Google we request only your basic profile (name, email address, profile picture) through the openid, email and profile scopes. We use this data solely to create and identify your Frontrunner account and to show who you are inside the platform. We do not use Google user data for advertising, we do not sell it, and we do not share it with third parties except the sub-processors listed below that are necessary to run the Service. Frontrunner's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Why we process data and on what basis
- To provide the Service and perform our contract with your organisation.
- To secure the Service, prevent abuse and keep an audit trail of actions taken (legitimate interest).
- To understand and improve the product (legitimate interest; you can object at any time).
- To communicate with you about the Service (contract and legitimate interest).
- To comply with legal obligations.
5. Sharing and sub-processors
We share personal data only with providers that help us run the Service, under contracts that restrict their use of it: WorkOS (authentication), Render (hosting), Anthropic (the AI models behind the assistant and agents), PostHog (product analytics), Resend (transactional email), Slack (internal notifications), Cloudflare (DNS and edge). We may also disclose data where the law requires it or to protect the rights and safety of Frontrunner, our customers or others. We do not sell personal data.
6. International transfers
We operate from the United Kingdom and Denmark and use providers in the European Union and the United States. Where personal data leaves the UK or EU we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.
7. Retention
Account and usage data are kept for as long as your organisation has an account with us and for a reasonable period afterwards to meet legal, accounting and security needs. Customer data connected from third-party systems is kept for as long as the connection exists and deleted or returned when your organisation ends the Service. Audit logs are retained for security purposes.
8. Security
Access to the platform is limited to authenticated members of your organisation. Third-party credentials your organisation connects are encrypted at rest. Access by Frontrunner staff to a customer's workspace is logged.
9. Your rights
Depending on where you live you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority (in the UK, the ICO; in Denmark, Datatilsynet). To exercise a right, email founders@usefr.com. If your data is held on behalf of your organisation we may refer your request to them.
10. Cookies
The platform uses a strictly necessary session cookie to keep you signed in and, for product analytics, a first-party PostHog cookie. The marketing site sets no tracking cookies.
11. Changes
We will post any changes to this policy on this page and update the effective date. Material changes will be communicated to account holders by email.